Skip to main content

_00 class notes


8.26.26 Wednesday
On your laptop:
ethernet adapters: usb-c for laptops
home scans on wired network: compare
brew install nmap arp-scan wireshark mtr masscan netcat
brew install --cask wireshark-chmodbpf. (gives you access to interfaces)

pi server stations:
join cyber5 network
note IP address (ifconfig)
note MAC address (ip link show)
ping gateway
traceroute to 4.4.4.4
challenge: scan local wLAN with arp -a
challenge: scan local network with nmap -sn
challenge: ssh into other machines, then change password (share with me)
question: what is pentesting?

install these:
change name (sudo raspi-config)
activate raspberry pi connect (sudo raspi-config)
pi-apps
angry ip scanner (ip scan)
etherape
nmap
zenmap
arp-scan
wireshark
install java: sudo apt install libswt-gtk-4-java libswt-gtk-4-jni -y

homework:
ifconfig
route -n get default
ipconfig getifaddr en0
sudo arp-scan --localnet
nmap -sn 192.168.50.0/24 (change to match the network)
scan a target: nmap 192.168.50.20. (change for target)
deeper scan: nmap -sV 192.168.50.20 (change for target)
sudo nmap -O 192.168.50.20
sudo nmap -sS -sV -O 192.168.50.20

next: wireshark
ping 192.168.50.20
filter: icmp
filter: tcp.port == 80

Friday:
IP notation
networks
DNS
DHCP
testing basics: ping, traceroute, nslookup, dig
navigation: 
pwd, ls, cd, mkdir, touch, nano, mv, rm
create hidden file
ssh challenge: find the file
navigation: wildcards, up, back, ctrl-c  ctrl-z
=============================

Migration

email to bill@hpa.edu

quiz: 8.24.26

  1. what was the speed of the ethernet cable you created?
  2. as a cybersecurity expert, what are the good and bad parts of ethernet, wireless and fiber?
  3. from your homework, list the IP address, subnet mask and router you found
  4. list the MAC address for your computer

worksheet 8.24.26-network recon; find the intruder!
record your results and email to bill@hpa.edu
part one: arp scans, MAC addresses
  1. join the cyberwifi network (password on the board)
  2. run an arp -a scan
  3. how many hosts do you see?
  4. what is common about their MAC address? (look at the first 3 pairs)
  5. look online for OUI lookup, (a wireshark utility), copy in progressone of the MAC addresses you found
  6. what could this tell you about the intruder?
part two: nmap
  1. pick one of the clients on the cyberwifi network (remember, these are your friends, be nice)
  2. use nmap -sn 192.168.4.0/24 to verify the IP address for your victim
  3. use nmap 192.168.4.x to scan the victim
  4. what do you see?
part three: IP net monitor
  1. make sure you have IP net monitor installed on your computer
  2. run a bonjour scan on your network-do you see IP addresses there?
  3. repeat the steps above using the Address Scan tool and port scan
Homework: 8.24.26
  • Use the tools above at home/dorm and record your results so you can share with the class Wednesday
  • Look on the app store for other network scanners, try a few of the free ones on your network
next:
  • setup your pi server
  • linux for hackers
  • hcrw text

Migrated from Apple WikiServer Wiki. Original page w378H2o5Y.ID: w378H2o5Y